Securityset command

Description Manages security sets in the security database.

NOTE: This command is available only with the SANtegrity Enhanced PFE key.

Authority Admin session and a Security Edit session. Refer to the Security command for information about starting a Security Edit session. The Active, Groups, and List operands are available without an Admin session. You must end the Security Edit session before using the Activate and Deactivate operands.

Syntax securityset

activate [security_set] active

add [security_set] [group_list]

copy [security_set_source] [security_set_destination] create [security_set]

deactivate

delete [security_set] groups [security_set] list

remove [security_set] [group]

rename [security_set_old] [security_set_new]

Operands activate [security_set]

Activates the security set given by [security_set]. This operand deactivates the active security set. End the Security Edit session using the Security Save or Security Cancel command before using this operand.

active

Displays the name of the active security set. This operand is available to without an Admin session.

add [security_set] [group_list]

Adds one or more groups given by [group_list] to the security set given by [security_set]. Use a <space> to delimit multiple group names in [group_list]. A security set can have a maximum of three groups with no more than one group of each group type.

copy [security_set_source] [security_set_destination]

Creates a new security set named [security_set_destination] and copies into it the membership from the security set given by [security_set_source].

create [security_set]

Creates the security set with the name given by [security_set]. A security set name must begin with a letter and be no longer than 64 characters. Valid characters are 0—9, A—Z, a—z, _, $, ^, and -. The security database supports a maximum of 4 security sets.

deactivate

Deactivates the active security set. End the Security Edit session before using this operand.

delete [security_set]

Deletes the security set given by [security_set]. If the specified security set is active, the command is suspended until the security set is deactivated.

groups [security_set]

Displays all groups that are members of the security set given by [security_set]. This operand is available without an Admin session.

152 Command Line Interface